Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/91F274442F2B11EE928A2881C4F9AE02.roa
File:                     91F274442F2B11EE928A2881C4F9AE02.roa (raw, json)
Hash identifier:          X895YdwXZ2+tj88QqzkjWe9/KA3nvJCRuf7kshHrxEU=
Subject key identifier:   3C:62:17:93:A0:4A:E3:D2:27:05:ED:33:E3:E6:12:68:C0:75:E2:65
Certificate issuer:       /CN=A919B663/serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E
Certificate serial:       01EF
Authority key identifier: AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/91F274442F2B11EE928A2881C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:31:39 +0000
ROA not before:           Fri 01 Aug 2025 05:11:30 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     64073
IP address blocks:        103.243.102.0/23 maxlen: 23
                          103.243.102.0/24 maxlen: 24
                          103.243.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl
                          rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 495 (0x1ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B663, serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E
        Validity
            Not Before: Aug  1 05:11:30 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a59f4b-0ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:61:23:be:95:47:2d:56:a7:9b:de:3b:b0:
                    ae:aa:d1:dc:0a:9a:48:42:8d:61:c0:09:c3:6d:6a:
                    7b:89:c1:b4:54:5b:a6:d3:39:32:cc:c5:6a:2c:31:
                    fa:86:af:49:7b:13:20:34:87:1b:03:38:a2:10:5e:
                    01:77:47:02:07:21:df:67:2a:0f:23:10:4f:dd:df:
                    11:1d:af:d3:27:46:07:bc:7e:f5:f9:91:80:70:e6:
                    be:cc:cb:87:50:96:59:5e:65:ab:50:73:64:d0:04:
                    6c:f4:eb:8f:bf:55:f8:de:65:71:d5:e5:0e:58:31:
                    37:06:f9:fc:2b:ab:b5:33:97:37:31:d3:69:15:02:
                    9f:f7:c9:85:03:ef:b6:ce:0e:de:5a:e5:b9:21:e7:
                    f4:49:24:75:94:6d:8e:52:6e:ef:5d:6f:26:8c:74:
                    f8:c2:f6:5d:51:ae:78:e9:a0:b3:6b:5d:e9:b4:4f:
                    ab:fe:39:63:c6:1d:41:d9:df:bf:69:d7:1f:73:89:
                    97:86:ec:c5:1c:cc:78:5b:e2:57:00:3a:53:8e:f6:
                    3b:6a:af:83:c9:11:50:72:96:19:94:f2:2d:28:e1:
                    f0:4d:51:85:5f:be:d5:b3:01:2d:c9:fe:be:a1:f8:
                    ee:47:ce:fc:51:f7:76:67:0c:18:03:46:ff:8c:63:
                    c8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:62:17:93:A0:4A:E3:D2:27:05:ED:33:E3:E6:12:68:C0:75:E2:65
            X509v3 Authority Key Identifier:
                keyid:AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/91F274442F2B11EE928A2881C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:fc:51:b9:dd:de:4f:b6:da:7c:09:9a:94:30:5f:d4:ca:34:
         24:e6:7b:0e:5b:a9:e4:db:73:44:60:82:02:37:a5:f9:da:f9:
         5a:dc:11:bd:e6:90:e0:0c:03:57:bc:fe:bf:02:c1:0a:8b:73:
         87:4b:39:df:c8:ac:2a:ee:64:28:15:85:99:e2:9b:8f:fc:95:
         fe:35:f7:2d:8f:1b:ac:08:8b:3f:42:54:7a:03:cd:a2:db:30:
         c5:3e:22:20:1d:62:f4:ae:ea:3b:7e:b3:bb:af:d1:fe:c6:13:
         83:60:a8:c1:85:7d:c5:e1:ef:89:0f:f9:5b:f2:8b:e6:ff:44:
         72:41:49:c3:e5:d5:29:e1:6f:54:c3:f4:f9:fe:f1:41:88:05:
         d2:00:e1:bf:d9:56:a0:80:dc:f1:c9:4c:fa:ee:3b:09:1c:bd:
         3e:5b:4d:17:07:e0:56:f8:58:6a:c3:a2:d9:9e:05:c7:85:6b:
         0d:18:83:8d:27:48:1f:81:07:c5:2a:68:fc:42:17:ca:bf:57:
         f1:06:0e:bd:48:7d:b8:7d:f4:1e:e6:15:5f:dc:5b:16:93:d7:
         85:25:6f:32:73:f2:21:8a:d7:99:78:6a:9a:5f:a6:d4:16:4f:
         7a:4d:2f:48:c3:f4:31:59:5b:6c:c3:9a:1e:6d:19:dd:46:44:
         fb:27:c9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:23 2026 by rpki-client